Senior Security Analyst - Vulnerability Response
6-Month contract - Inside IR35 - market rate
London based - hybrid working - 1-2 days a week onsite
Banking sector - must have previous experience in this sector
The role will lead the organisation's vulnerability response capability, ensuring vulnerabilities are rapidly identified, assessed, prioritised, remediated and governed. They will coordinate remediation efforts across infrastructure, cloud, application and wider technology teams, while ensuring compliance with internal policies, regulatory requirements and remediation SLAs.
Key responsibilities:
Manage the end-to-end vulnerability response lifecycle.
Prioritise vulnerabilities based on severity, exploitability, business criticality and threat intelligence.
Lead and manage vulnerability remediation activities across technology teams.
Ensure critical and high-risk vulnerabilities are remediated within agreed SLAs.
Drive accelerated response for actively exploited and zero-day vulnerabilities.
Produce management information and executive reporting.Required experience / skills:
Significant experience in Vulnerability Management, Cyber Security Operations or Cyber Defence.
Experience leading remediation programmes across large enterprise environments.
Strong understanding of vulnerability scoring methodologies such as CVSS.
Experience managing technology risk and remediation governance.
Exposure to regulatory and security frameworks including:
NIST SP 800-40
DORA
FCA/PRA requirementsDisclaimer:
This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change
